There are many ways to create persistence into a Windows client. Some of these techniques will create reverse shell backdoors that can be connected to with a listener while others allow the attacker to start the connection through RDP or WinRM. Some techniques can only be achieved with Administrator or System privileges. My notes for […]
Windows Persistence Read More »
ISO 27001 – Foundational standard for ISMSISO 27002 – Focuses on infosec controlsISO 27701 – Management of PIIISO 31000 – Risk management
ISO Cyber Standards Read More »
In the ever-expanding digital ecosystem, the need for cybersecurity frameworks has become increasingly evident as they provide structured approaches to address the growing complexity of cyber threats. Two of the most commonly used frameworks are the NIST Cybersecurity Framework (CSF) and the NIST Risk Management Framework (RMF). NIST Cybersecurity Framework NIST’s CSF is a comprehensive
NIST Frameworks and Standards Read More »
A Certificate Authority (CA) is a crucial part of securing communication. A CA can be public or private: a public CA is an organization that provides digital certificates for a fee, whereas a private CA is an internal server set up to store and issue digital certificates for use within the network. These digital certificates
Certificate Authorities Read More »
Public key infrastructure (PKI) isn’t a single protocol or process for providing security to an organization. Instead, it is the whole system of policies and procedures that create, store, distribute, and revoke digital certificates through an organization. PKI can be very different for the various services it can be applied to. For example, the PKI
Public Key Infrastructure Read More »
Hello world! After 5 years working as a building enclosure and structural engineer, I have decided to try to break into the cybersecurity world. This blog post is hopefully the first of many, and as I learn new topics, I will add more entries here. For me, the best way to make sure I’ve learned
From Engineer to Analyst: A Journey to Becoming a Level 1 SOC Analyst Read More »